Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35966020DCA911EF94350CAC762E951A.roa
File: 35966020DCA911EF94350CAC762E951A.roa (raw, json)
Hash identifier: vpgftLOPiN3YYWyeRwisQjVfpJa2yNfvqITbGye1XsY=
Subject key identifier: 3F:0D:BE:0F:8A:AA:14:20:BA:7A:8D:BF:C9:4B:B9:58:8F:0F:36:62
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014C01
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35966020DCA911EF94350CAC762E951A.roa
Signing time: Mon 27 Jan 2025 12:21:18 +0000
ROA not before: Mon 27 Jan 2025 12:21:14 +0000
ROA not after: Sat 08 Feb 2025 12:21:14 +0000
asID: 7018
IP address blocks: 154.214.16.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84993 (0x14c01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 12:21:14 2025 GMT
Not After : Feb 8 12:21:14 2025 GMT
Subject: CN=67977a3e-fe35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0d:50:c5:60:7c:53:b0:46:4c:c1:62:cf:43:
f9:ab:c6:70:c0:1a:83:5c:a2:74:29:09:35:ef:ae:
4d:17:bd:ca:ed:cb:b2:46:38:bf:0a:10:30:5a:51:
10:a8:bc:43:20:01:64:ab:86:ca:4e:ca:2e:f2:4f:
aa:87:7d:70:3c:19:94:50:d5:01:0f:06:40:1d:0f:
b2:d9:c8:a7:4a:6d:94:ff:84:72:ca:75:a8:f9:37:
f6:65:ef:94:b3:d7:0d:f4:d2:1c:e3:39:26:58:19:
49:15:d2:c7:78:12:fa:ea:34:d1:32:13:94:68:2f:
7d:30:aa:85:3b:00:04:e5:49:0c:a2:48:25:0f:8f:
3c:98:de:85:e0:71:d6:eb:17:b8:b3:49:08:1e:ae:
92:f2:9d:f0:89:3e:ef:a2:b9:33:bd:a6:ff:fa:c6:
42:03:c1:66:f9:96:01:b1:b4:b9:5f:7c:ea:32:d5:
e1:38:2f:7c:f4:04:4b:72:5b:c2:35:29:cf:7f:30:
2f:34:d4:64:77:a5:d5:e6:4b:92:e9:c8:dd:50:ca:
46:6c:15:a9:c9:ce:ef:3a:2d:ad:88:5d:de:ed:b2:
98:1e:49:87:ce:0d:08:ab:14:ba:03:f1:f2:80:58:
5e:b5:c9:f1:0a:ee:e4:55:49:06:4d:76:38:d9:6a:
40:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0D:BE:0F:8A:AA:14:20:BA:7A:8D:BF:C9:4B:B9:58:8F:0F:36:62
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35966020DCA911EF94350CAC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.16.0/21
Signature Algorithm: sha256WithRSAEncryption
94:75:a8:c6:7b:07:67:74:46:5b:1b:b3:d2:f5:1d:3b:4a:03:
5b:88:da:ad:44:b9:34:1e:70:05:5e:5f:0f:b6:b2:3a:b7:e2:
00:b2:e5:6e:a9:b8:eb:59:01:70:68:ea:b9:2a:ec:14:6c:89:
4e:ac:29:b4:69:88:0a:e3:16:7e:43:8d:c4:08:ca:93:90:23:
70:48:b8:5d:e1:13:0f:e4:54:cd:06:11:60:b4:7a:26:9d:1a:
c4:7d:9e:91:fa:26:13:75:4c:c8:d3:a0:67:59:b1:5c:d2:23:
18:0d:d0:63:9c:5d:4e:8c:e7:02:04:4a:8c:a8:a1:a2:20:5d:
71:78:6f:71:9a:ca:08:1e:cb:07:b9:a6:29:53:fe:6b:ab:75:
69:04:35:ee:56:13:28:05:7a:34:96:72:f1:cf:55:76:38:e9:
ae:0b:3f:77:6d:f6:50:79:ed:cc:b1:1d:04:76:5c:ec:a4:7e:
1f:cd:0e:2e:95:de:3c:c8:61:47:97:a0:ff:7c:47:1c:8d:7a:
a0:9c:a9:90:18:20:12:8b:a8:ba:26:06:a6:2c:70:04:87:d6:
94:4f:63:04:f3:e9:5e:2f:9f:9e:c7:cc:a6:d5:62:df:d7:d1:
e9:ca:02:46:68:ff:bd:c0:30:e3:43:6e:bf:55:6a:65:d7:98:
05:5f:ee:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:41:00 2025 by rpki-client